Cyber Security Operations Analyst

Caraffi; Reading; On-site; GBP 55,000 - 75,000; Full time

Job summary

Caraffi, a leading global retail organisation, is seeking an experienced Cyber Security Operations Analyst to join their Cyber Security Operations function in Reading. This permanent role focuses on strengthening cyber defence during a major technology transformation.

You will enhance security operations, drive detection and response, and maturity of security processes, tooling and documentation, while supporting incident response and forensics activities as needed.

Qualifications

• 4+ years’ enterprise cyber security experience, ideally cloud and on‑prem.
• Strong background in Security Operations, Incident Response and investigations.
• Degree, equivalent experience or recognised security/IT certifications.

Responsibilities

• Build and maintain knowledge of security technologies, driving improvements across processes and tooling.
• Manage and triage security tickets with timely, accurate handling.
• Validate tool coverage against asset inventories to ensure protection.
• Create, maintain and improve SOC documentation and procedures.
• Conduct in‑depth analysis of incidents and investigations.
• Coordinate internal response during major incidents and support post‑incident reviews.
• Identify threats, gaps and opportunities for improvement.
• Produce metrics and reporting for operational visibility.
• Coordinate digital forensics with third parties when required.
• Perform vulnerability assessments and support remediation prioritisation.
• Contribute to SOC operations including threat detection and response.

Skills

Cyber security operations

Incident response

Threat detection

Vulnerability management

Security tooling

Team collaboration

Education

Degree or certifications

Job description

A leading global retail organisation is seeking an experienced Cyber Security Operations Analyst to join their Cyber Security Operations function. This permanent role sits within a growing security capability and will play a key part in strengthening the organisation’s cyber defence posture during a major technology transformation.

The position focuses on enhancing security operations, improving detection and response capabilities, and supporting the maturity of security processes, tooling and documentation.

What You’ll Do

• Build and maintain expert knowledge of security technologies, driving continuous improvement across processes and tooling
• Manage and triage security tickets, ensuring timely and accurate handling
• Validate security tool coverage against asset inventories to ensure comprehensive protection
• Create, maintain and improve SOC documentation and operational procedures
• Conduct in‑depth analysis of security incidents and investigations
• Coordinate internal response during major incidents and support post‑incident reviews
• Identify emerging threats, detection gaps and opportunities for improvement
• Produce metrics and reporting to support operational visibility
• Coordinate digital forensics activities with third‑party partners when required
• Perform vulnerability assessments and support prioritisation of remediation
• Contribute to SOC operations including threat detection, incident response and vulnerability management
• Analyse events from multiple sources including user reports, security tools and threat intelligence
• Escalate issues appropriately and recommend improvements based on trends and industry insights
• Support standardisation of processes, troubleshooting and best‑practice adoption
• Contribute to cyber security planning, requirements, design and validation activities
• Document findings and provide clear recommendations for technical and management audiences

What You’ll Bring

• 4+ years’ experience in enterprise cyber security, ideally across both cloud and on‑premise environments
• Strong background in Security Operations, Incident Response and investigations
• Solid understanding of networking protocols, architectures and modern operating systems
• Strong grounding in cyber security principles and their application in complex systems
• Experience working within multi‑skilled teams
• Strong adherence to processes, defined roles and high‑quality delivery
• Relevant degree, equivalent experience or recognised security/IT certifications

Essential & Desirable Skills

• Passion for challenging the status quo and contributing to a forward‑looking cyber security vision
• Excellent written and verbal communication skills
• Ability to learn quickly, work independently and thrive in a fast‑paced operational environment
• Familiarity with current hacking techniques, vulnerability disclosures and breach trends
• Strong analytical thinking with the ability to balance risks, benefits and consequences
• Desirable: recognised security certifications, experience with regulated environments, or exposure to modern security frameworks